Our privacy policy

1. PURPOSES AND LEGAL BASIS FOR DATA PROCESSING

We process data, including personal data (such as the first and last name, personal identification number, address, email, and phone number of the customer or their representative) (hereinafter referred to as "data") in the following cases:

  • When submitting an inquiry (including questions, purchase requests, purchase interest) for the purpose of fulfilling the inquiry.
  • When concluding and executing contracts for the purpose of concluding and executing contracts.
  • When fulfilling obligations arising from the law for the purpose of fulfilling obligations.

In general, we collect data directly from the data subject with their consent. Additionally, we use cookies to optimize the user experience on our website and provide better services to customers (see our Cookie Policy).

The legal basis for data processing is legitimate interest, and we primarily follow the General Data Protection Regulation (GDPR) and the Personal Data Protection Act.

2. DATA CONTROLLER

The data controller is Everaus Capital OÜ ( myyk@everaus.ee). The data controller may transfer data for processing to authorized processors (e.g., real estate brokerage service providers, interior design service providers) with whom the data controller has a contractual relationship.

3. DATA RETENTION

We retain data as long as necessary to fulfill the purposes mentioned in section 1, to protect our rights, or to comply with legal obligations.

4. DATA PROTECTION

The objective is to prevent unauthorized data processing by ensuring need-based access to data and preventing unauthorized disclosure. To achieve this, we implement organizational, physical, and IT security measures. The employees of the data controller are required to comply with all data protection regulations stipulated by law.

5. RIGHTS OF THE DATA SUBJECT

  • Right to information about what data we process and how.
  • Right to withdraw consent at any time if data is processed based on consent.
  • Right to request deletion of data if the data is processed based on consent and consent has been withdrawn, or if the data retention period has expired and the data does not need to be archived.
  • Right to request correction of data if the data has changed or is otherwise inaccurate or insufficient.
  • Right to lodge a complaint with the Data Protection Inspectorate or the court.